Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in lifematon (npm)
- Aug 14, 2025
Malicious code in lifelab (npm)
- Aug 14, 2025
Malicious code in lifecnc (npm)
- Aug 14, 2025
Malicious code in lidewyde (npm)
- Aug 14, 2025
Malicious code in lichen-x02p7-gha4x-thunder-project (npm)
- Aug 14, 2025
Malicious code in lichen-twshi-r04ud-zenith-project (npm)
- Aug 14, 2025
Malicious code in lichen-cj6zk-dh8wd-orbit-project (npm)
- Aug 14, 2025
Malicious code in lichen-4qcee-425uk-yonder-project (npm)
- Aug 14, 2025
Malicious code in lichen-1iocs-k4zcj-ripple-project (npm)
- Aug 14, 2025
Malicious code in licence-checker (npm)
- Aug 14, 2025
Malicious code in libusby (npm)
- Aug 14, 2025
Malicious code in libusbip (npm)
- Aug 14, 2025
Malicious code in libucl (npm)
- Aug 14, 2025
Malicious code in libsord (npm)
- Aug 14, 2025
Malicious code in libsipc (npm)
- Aug 14, 2025
Malicious code in libsignon (npm)
- Aug 14, 2025
Malicious code in libretee (npm)
- Aug 14, 2025
Malicious code in library-slides-spectron-webdriver-isostasy (npm)
- Aug 14, 2025
Malicious code in library-metalsmith-apollo-protractor (npm)
- Aug 14, 2025
Malicious code in library-commitizen-webdriver-manager-neptunology (npm)
- Aug 14, 2025
Malicious code in libpostcss (npm)
- Aug 14, 2025
Malicious code in libparty (npm)
- Aug 14, 2025
Malicious code in liboccam (npm)
- Aug 14, 2025
Malicious code in libnfc (npm)
- Aug 14, 2025
Malicious code in libmii (npm)
- Aug 14, 2025
Malicious code in libmap (npm)
- Aug 14, 2025
Malicious code in liblcdgr (npm)
- Aug 14, 2025
Malicious code in libinoro (npm)
- Aug 14, 2025
Malicious code in libi-common (npm)
- Aug 14, 2025
Malicious code in libhid (npm)
- Aug 14, 2025
Malicious code in libhbaapi (npm)
- Aug 14, 2025
Malicious code in libfluid (npm)
- Aug 14, 2025
Malicious code in libefsm (npm)
- Aug 14, 2025
Malicious code in libdvd (npm)
- Aug 14, 2025
Malicious code in libdgg (npm)
- Aug 14, 2025
Malicious code in libcutsim (npm)
- Aug 14, 2025
Malicious code in libbsd (npm)
- Aug 14, 2025
Malicious code in libblp (npm)
- Aug 14, 2025
Malicious code in lib-transmit (npm)
- Aug 14, 2025
Malicious code in lib-react-component-page-notifications (npm)
- Aug 14, 2025
Malicious code in lib-deepdocs-js (npm)
- Aug 14, 2025
Malicious code in lianji (npm)
- Aug 14, 2025
Malicious code in lhrwvaebftsxmkjk (npm)
- Aug 14, 2025
Malicious code in lhdnysawcxbgukrk (npm)
- Aug 14, 2025
Malicious code in lg-mutator-mobile-ads (npm)
- Aug 14, 2025
Malicious code in lfnvrkikegxtocpb (npm)
- Aug 14, 2025
Malicious code in lfgjkvmrzyueksoh (npm)
- Aug 14, 2025
Malicious code in leysersfx (npm)
- Aug 14, 2025
Malicious code in lexmar (npm)
- Aug 14, 2025
Malicious code in lexicrypt (npm)
Page 5949 of 7,326